9932 matches found
Fedora Core 6 : dbus-1.0.1-8.fc6 (2006-1475)
Kimmo Hamalainen reported a DoS flaw in D-Bus that can cause a local user to disable the the ability of another process to receive certain messages. This flaw does not contain any potential for arbitrary code execution. Note that Tenable Network Security has extracted the preceding description...
USN-401-1: D-Bus vulnerability
Kimmo Hämäläinen discovered that local users could delete other users' D-Bus match rules. Applications would stop receiving D-Bus messages, resulting in a local denial of service, and potential data loss for applications that depended on D-Bus for storing information...
High performance Windows file server
A powerful file server for Windows No part - reflections without memories. Without further ado, let's start by thinking about what a file server is, how it functions, and what we need to make a file server as fast as possible, for example, to make the most of our gigabit network. At first glance,...
D-Bus cross-application messaging system DoS
Vulnerability in matchruleequal allows application to remove rules of different applications...
[ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:233 http://www.mandriva.com/security/ Package : dbus Date : December 18, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: A vulnerability was discovered in D-Bus that could be...
D-Bus signals.c本地拒绝服务漏洞
D-BUS是一个设计目标为应用程序间通信的消息总线系统。 D-BUS的实现上存在拒绝服务漏洞,本地攻击者可能利用此漏洞导致特定的进程无法收到特定的消息,使用户不能使用系统。 D-BUS代码中的matchruleequal函数可能导致删除其他连接的匹配关系,这样某些进程就可能无法接收消息。 D-Bus D-Bus = 1.0.1 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://dbus.freedesktop.org/releases/dbus/dbus-1.0.2.tar.gz...
CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
DEBIAN-CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
CVE-2006-6107
D-Bus vulnerability CVE-2006-6107: An unspecified flaw in match_rule_equal (bus/signals.c) affects D-Bus pre-1.0.2, enabling local attackers to remove match rules for other apps and cause a denial of service (lost process messages). The provided documents do not specify a fixed version or remedia...
CVE-2006-6107: Undefined Security Weakness
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
CVE-2006-6107
Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...
dbus -- match_rule_equal() Weakness
Secunia reports: D-Bus have a weakness, which can be exploited by malicious, local users to cause a DoS Denial of Service. An error within the "matchruleequal" function can be exploited to disable the ability of other processes to receive messages by removing their matches from D-Bus...
security flaw
The dvdreadbca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, assigns the wrong value to a length variable, which allows local users to execute arbitrary code via a crafted USB Storage device that triggers a buffer overflow...
Bad ext3/nfs DoS bug
I've tried contacting the relevant maintainers directly, and it's even in the kernel bugzilla, but nothing's happened and it's been over a month now. No-one seems to be doing anyting about this. Is one meant to post this to bugtraq or what? Here's the bug:...
security flaw
Linux kernel 2.6.8 to 2.6.14-rc2 allows local users to cause a denial of service kernel OOPS via a userspace process that issues a USB Request Block URB to a USB device and terminates before the URB is finished, which leads to a stale pointer reference...
Code injection
The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...
CVE-2006-1538
The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...